Amendments to the Claims : 
This listing of claims will replace all prior versions, and 
listings, of claims in the application: 

Listing of Claims : 

1-20. (Canceled) 

21. (Previously presented) A program segment stored on a 
computer readable medium for cryptographically converting a digital 
input data block M into a digital output data block; said program 
segment comprising : 

a program portion for merging a selected part Ml of said 
digital input data block M with a first digital key Kl to produce a 
data block Bl which non-linearly depends on said selected part Ml 
and said first digital key Kl; and 

a program portion for deriving said digital output block from 
said data block Bl and the remaining part of the digital input data 
block M, wherein said merging step is performed by executing a non- 
linear function g for non-linearly merging said selected part Ml 
and said first key Kl in a single step. 

22. (Previously presented) A program segment as claimed in claim 
21, comprising: 
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a program portion for splitting said digital input block into 
said selected part Ml and a second part M2 before executing said 
program portion for merging; 

a program portion for executing a non-linear function g' 1 to 
merge said second block M2 with a second key K2 in one step, 
producing a data block B2 as output; said non-linear function g" 1 
being the inverse of said non-linear function g; and 

a program portion for forming combined data from data in said 
data block Bl and in said data block B2; said digital output block 
being derived from said combined data. 

23. (Previously presented) A program segment as claimed in claim 
21, wherein said program portion for merging comprises: 

a program portion for splitting said selected part Ml in a 
first plurality n of sub-blocks m 0 ,..,m n -i of substantially equal 
length; 

a program portion for splitting said first key Kl in said 
first plurality n of sub-keys k 0 , ..,k n _i, substantially having equal 
length, the sub-key ki corresponding to the sub-block m if for i = 0 
to n-1; 

a program portion for separately processing each of said sub- 
blocks mi by executing for each of said sub-blocks mi a same non- 
linear function h for non-linearly merging a sub-block bi derived 
from said sub-block mi with said corresponding sub-key ki in one, 
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sequentially inseparable step and producing said first plurality of 
output sub-blocks h(bi, ki) ; and 

a program portion for combining sub-blocks ti derived from 
said first plurality of said output sub-blocks h(b if k±) to form 
said data block Bl. 

24. (Previously presented) A program segment as claimed in claim 
22, wherein said program portion for executing said non-linear 
function g" 1 comprises : 

a program portion for splitting said second part M2 in said 
first plurality n of sub-blocks m n , . .,m 2n -h substantially having 
equal length; 

a program portion for splitting said key K2 in said first 
plurality n of sub-keys k n , ..,k 2n -i, substantially having equal 
length, the sub-key k± corresponding to the sub-block m ir for i = n 
to 2n-l; 

a program portion for executing for each of said sub-blocks mi 
a same non-linear function h" 1 for non-linearly merging a sub-block 
bi derived from said sub-block iru with said corresponding sub-key ki 
and producing said first plurality of an output sub-block hf^bi, 
ki) ; said function h" 1 being the inverse of said function h; and 

a program portion for combining sub-blocks ti derived from 
said first plurality of output sub-blocks h" 1 (b i/ ki) to form said 
data block B2 . 
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25. (Previously presented) A program segment as claimed in claim 
23, wherein said sub-block b± is derived from said sub-block mi by 
bit-wise adding a constant pi to said sub-block m±, said constant pi 
substantially having equal length as said sub-block mi. 

26. (Previously presented) A program segment as claimed in claim 
23 , characterised in that said function h(bi,ki) is defined by: 
h(bi,ki) = (bi.ki)" 1 , if bi * 0, k± * 0, and bi * k± 

h(bi,ki) = (ki)" 2 , if bi = 0 

h(bi,ki) = (bi)" 2 , if ki = 0 

h(b if ki) = 0, if bi = ki, 

where the multiplication and inverse operations are predetermined 
Galois Field multiplication and inverse operations. 

27. (Previously presented) A program segment as claimed in claim 

26, wherein deriving said sub-blocks ti from said output sub-blocks 
h(bi, ki) comprises bit-wise adding a constant dj to said output 
sub-block h(bi,ki), said constant di substantially having equal 
length as said sub-block mi. 

28. (Previously presented) A program segment as claimed in claim 

27, wherein deriving said sub-blocks ti from said output sub-blocks 
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h(bi, ki) further comprises raising h(b i/ k i ) © d± to a power 2 1 , 
using said predetermined Galois Field multiplication. 

29. (Previously presented) A program segment as claimed in claim 
26, wherein deriving said sub-blocks ti from said output sub-blocks 
h(bi, ki) comprises raising said output sub-block h(bi,ki) to a 
power 2 1 , using said predetermined Galois Field (GF) multipli- 
cation . 

30. (Previously presented) A program segment as claimed in claim 
24, wherein said combined data is formed by: 

swapping the sub-blocks ti and t 2n -i-if for i = 0 to n-1; and 
concatenating the swapped sub-blocks. 

31. (Previously presented) A program segment as claimed in claim 
26, wherein said sub-block mi comprises eight data bits, and 
wherein said multiplying of two elements b and c of GF(2 8 ) 
comprises executing a series of multiplications and additions in 
GF(2 4 ) . 

32. (Previously presented) A program segment as claimed in claim 
31, wherein said multiplying of said two elements b and c 
comprises : 
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representing b as a 0 + ai.D and c as a 2 + a 3 .D, where ao, ai, a 2 
and a 3 are elements of GF(2 4 ), and where D is an element of GF(2 8 ) 
defined as a root of an irreducible polynomial k(x) = x 2 + x + (3 
over GF(2 4 ), where (3 is an element of GF(2 4 ); and 

calculating (aoa2 + aia 3 (3) + (aia 2 + aoa 3 + aia 3 ).D. 

33. (Previously presented) A program segment as claimed in claim 
32, wherein (3 is a root of an irreducible polynomial h(x) = x 4 + x 3 
+ x 2 + x + 1 over GF(2) . 

34. (Previously presented) A program segment as claimed in claim 
26, wherein said sub-block mi comprises eight data bits, and 
wherein calculating the inverse of an element b of GF(2 8 ) comprises 
performing a series of calculations in GF(2 4 ). 

35. (Previously presented) A program segment as claimed in claim 
34, wherein calculating the inverse of said element b comprises: 

representing b as a 0 + ai.D, where a 0 and ai are elements of 
GF(2 4 ), and where D is an element of GF(2 8 ) defined as a root of an 
irreducible polynomial k(x) = x 2 + x + (3 over GF(2 4 ), where (3 is an 
element of GF(2 4 ); and 

calculating (a 0 2 + a 0 ai + ai 2 (3) _1 ((ao + ai) + a x D) . 
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36. (Previously presented) A processor for cryptographically 
converting a digital input block into a digital output block; said 
processor comprising : 

a first input for obtaining said digital input block; 
a second input for obtaining a first key Kl; and 
a cryptographic processing portion arranged to convert the 
digital input block into the digital output block by executing a 
non-linear function g for non-linearly merging said selected part 
Ml and said first key Kl in one step and producing a data block Bl 
which non-linearly depends on said selected part Ml and said first 
key Kl, where a selected part of said digital output block is 
derived from said data block Bl. 

37. (Previously presented) A processor as claimed in claim 36, 
wherein said processor comprises a third input for obtaining a 
second key K2, and wherein said processor is arranged to: 

split said digital input block into said selected part Ml and 
a second part M2 before performing said merging; 

perform a non-linear function g" 1 to merge said second block M2 
with said second key K2 in one step, producing a data block B2 as 
output; said non-linear function g" 1 being the inverse of said non- 
linear function g; and 
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combine data from data in said data block Bl and in said data 
block B2; said digital output block being derived from said 
combined data. 

38. (Previously presented) A processor as claimed in claim 36, 
wherein said merging comprises: 

splitting said selected part Ml in a first plurality n of sub- 
blocks m 0 ,..,m n -i of substantially equal length; 

splitting said first key Kl in said first plurality n of sub- 
keys k 0 ,..,k n -i, substantially having equal length, the sub-key ki 
corresponding to the sub-block m if for i = 0 to n-1; and 

separately processing each of said sub-blocks mi by executing 
for each of said sub-blocks mi a same non-linear function h for 
non-linearly merging a sub-block bi derived from said sub-block mi 
with said corresponding sub-key ki in one, sequentially inseparable 
step and producing said first plurality of output sub-blocks h(bi, 
ki) ; and 

combining sub-blocks ti derived from said first plurality of 
said output sub-blocks h(bi, ki) to form said data block Bl. 

39. (Previously presented) A processor as claimed in claim 38, 
wherein said function h(bi,ki) is defined by: 

h(bi,ki) = (bi.ki)" 1 , if bi * 0, ki * 0, and bi * ki 

h(bi,ki) = (ki)' 2 , if bi = 0 
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h(bi,ki) = (bi)- 2 , if k± = 0 

h(b if ki) = 0, if bi = ki, 

where the multiplication and inverse operations are predetermined 
Galois Field multiplication and inverse operations. 

40. (Currently amended) A processor as claimed in claim 
wherein said sub-block mi comprises eight data bits, and wherein 
said multiplying of two elements b and c of GF(2 8 ) comprises: 

representing b as a 0 + ai.D and c as a 2 + a 3 .D, where a 0/ ai, a 2 
and a 3 are elements of GF(2 4 ), and where D is an element of GF(2 8 ) 
defined as a root of an irreducible polynomial k(x) = x 2 + x + (3 
over GF(2 4 ), where (3 is an element of GF(2 4 ); and 

calculating (a 0 a 2 + aia 3 p) + (aia 2 + aoa 3 + aia 3 ).D; 
and wherein calculating the inverse of an element b of GF(2 8 ) com- 
prises calculating (a 0 2 + a 0 ai + ai 2 (3) ~ 1 ( (ao + ai) + aiD) . 
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